PT-2025-35073 · Unknown · Uxper Golo

Aiden · Publicado 2025-08-28 · Atualizado 2025-08-28 · CVE-2025-54725

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions uxper Golo versions through 1.7.0

Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in uxper Golo, allowing Authentication Abuse.

Recommendations Update uxper Golo to a version later than 1.7.0.

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

CVE-2025-54725

Produtos afetados

Uxper Golo

Referências · 7

• https://twitter.com/CveFindCom/status/1961053828762964334 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-0-broken-authentication-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/wordpress/theme/golo/vulnerability/wordpress-golo-theme-1-7-0-broken-authentication-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/1961090580278128768 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-54725 · Nota de Segurança
• https://t.me/CVEtracker/31114 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1961052776483479758 · Publicação no Twitter